Get IAM policies

  import 
  
 ( 
  
 "context" 
  
 "fmt" 
  
 "io" 
  
 iam 
  
 "cloud.google.com/go/iam/apiv1/iampb" 
  
 securitycenter 
  
 "cloud.google.com/go/securitycenter/apiv1" 
 ) 
 // getSourceIamPolicy prints the policy for sourceName to w and return it. 
 // sourceName is the full resource name of the source with the policy of interest. 
 func 
  
 getSourceIamPolicy 
 ( 
 w 
  
 io 
 . 
 Writer 
 , 
  
 sourceName 
  
 string 
 ) 
  
 error 
  
 { 
  
 // sourceName := "organizations/111122222444/sources/1234" 
  
 // Instantiate a context and a security service client to make API calls. 
  
 ctx 
  
 := 
  
 context 
 . 
 Background 
 () 
  
 client 
 , 
  
 err 
  
 := 
  
 securitycenter 
 . 
  NewClient 
 
 ( 
 ctx 
 ) 
  
 if 
  
 err 
  
 != 
  
 nil 
  
 { 
  
 return 
  
 fmt 
 . 
 Errorf 
 ( 
 "securitycenter.NewClient: %w" 
 , 
  
 err 
 ) 
  
 } 
  
 defer 
  
 client 
 . 
  Close 
 
 () 
  
 // Closing the client safely cleans up background resources. 
  
 req 
  
 := 
  
& iam 
 . 
  GetIamPolicyRequest 
 
 { 
  
 Resource 
 : 
  
 sourceName 
 , 
  
 } 
  
 policy 
 , 
  
 err 
  
 := 
  
 client 
 . 
 GetIamPolicy 
 ( 
 ctx 
 , 
  
 req 
 ) 
  
 if 
  
 err 
  
 != 
  
 nil 
  
 { 
  
 return 
  
 fmt 
 . 
 Errorf 
 ( 
 "GetIamPolicy(%s): %w" 
 , 
  
 sourceName 
 , 
  
 err 
 ) 
  
 } 
  
 fmt 
 . 
 Fprintf 
 ( 
 w 
 , 
  
 "Policy: %v" 
 , 
  
 policy 
 ) 
  
 return 
  
 nil 
 } 
 

  static 
  
 Policy 
  
 getIamPolicySource 
 ( 
 SourceName 
  
 sourceName 
 ) 
  
 { 
  
 try 
  
 ( 
 SecurityCenterClient 
  
 client 
  
 = 
  
 SecurityCenterClient 
 . 
 create 
 ()) 
  
 { 
  
 // Start setting up a request to get IAM policy for a source. 
  
 // SourceName sourceName = SourceName.of(/*organization=*/"123234324",/*source=*/ 
  
 // "423432321"); 
  
 GetIamPolicyRequest 
  
 request 
  
 = 
  
 GetIamPolicyRequest 
 . 
 newBuilder 
 (). 
 setResource 
 ( 
 sourceName 
 . 
 toString 
 ()). 
 build 
 (); 
  
 // Call the API. 
  
 Policy 
  
 response 
  
 = 
  
 client 
 . 
 getIamPolicy 
 ( 
 request 
 ); 
  
 System 
 . 
 out 
 . 
 println 
 ( 
 "Policy: " 
  
 + 
  
 response 
 ); 
  
 return 
  
 response 
 ; 
  
 } 
  
 catch 
  
 ( 
 IOException 
  
 e 
 ) 
  
 { 
  
 throw 
  
 new 
  
 RuntimeException 
 ( 
 "Couldn't create client." 
 , 
  
 e 
 ); 
  
 } 
 } 
 

  // Imports the Google Cloud client library. 
 const 
  
 { 
 SecurityCenterClient 
 } 
  
 = 
  
 require 
 ( 
 ' @google-cloud/security-center 
' 
 ); 
 // Creates a new client. 
 const 
  
 client 
  
 = 
  
 new 
  
  SecurityCenterClient 
 
 (); 
 async 
  
 function 
  
 getSourceIamPolicy 
 () 
  
 { 
  
 // sourceName is the full resource name to retrieve the policy for. 
  
 /* 
 * TODO(developer): Uncomment the following lines 
 */ 
  
 // const sourceName = "organizations/111122222444/sources/1234"; 
  
 const 
  
 [ 
 existingPolicy 
 ] 
  
 = 
  
 await 
  
 client 
 . 
 getIamPolicy 
 ({ 
  
 resource 
 : 
  
 sourceName 
 , 
  
 }); 
  
 console 
 . 
 log 
 ( 
 'Current policy: %j' 
 , 
  
 existingPolicy 
 ); 
 } 
 getSourceIamPolicy 
 (); 
 

  from 
  
 google.cloud 
  
 import 
 securitycenter_v1 
 client 
 = 
 securitycenter_v1 
 . 
 SecurityCenterClient 
 () 
 # 'source_name' is the resource path for a source that has been 
 # created previously (you can use list_sources to find a specific one). 
 # Its format is: 
 # source_name = "organizations/{organization_id}/sources/{source_id}" 
 # e.g.: 
 # source_name = "organizations/111122222444/sources/1234" 
 # Get the old policy so we can do an incremental update. 
 policy 
 = 
 client 
 . 
  get_iam_policy 
 
 ( 
 request 
 = 
 { 
 "resource" 
 : 
 source_name 
 }) 
 print 
 ( 
 f 
 "Policy: 
 { 
 policy 
 } 
 " 
 )